save-web-page
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
monolithCLI tool with specific arguments to archive web pages. - [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by ingesting and processing content from external web pages.
- Ingestion points: The URL passed to the
monolithcommand triggers the download and processing of external web content into the agent's environment. - Boundary markers: The skill does not explicitly provide boundary markers or instructions to ignore embedded prompts in its markdown, though the recommended tool flag helps.
- Capability inventory: The skill uses
monolithvia command line execution to write to the file system (defaulting to~/AI/web/). - Sanitization: The skill recommends the
--isolateflag formonolith, which is a security feature that disables JavaScript and external resource loading in the saved HTML, significantly reducing the execution risk of the ingested content.
Audit Metadata